Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: dEGreZ9ONdb7YLqXbSuoDr91/MldOwxs8OwAKl9QrfI=
Subject key identifier: AB:2E:E7:71:9E:34:93:5F:9F:2A:65:4F:3D:6A:7C:4C:49:46:D9:B6
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 0199FB7CB86615B8715266FA99CF4BA0F373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 14AE
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=)
2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: Jrr16Ic3V+iJ0CMtZQa5lktqxnmTX1Q3Gcis4suF3u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b8:66:15:b8:71:52:66:fa:99:cf:4b:a0:f3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=ab2ee7719e34935f9f2a654f3d6a7c4c4946d9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:45:3b:07:2c:3b:fc:b1:6f:b0:2d:ac:c2:
3e:a5:c4:02:db:c5:b2:4f:3f:81:d1:1a:7c:c1:4d:
83:85:42:a9:2b:a7:12:d8:2b:66:ca:7d:a5:0e:60:
4e:8e:ec:dc:9b:a6:6c:7b:a0:8b:88:a7:da:51:45:
a2:5d:b8:e1:88:10:fc:4a:25:2d:d7:29:4e:f1:b1:
92:34:2d:77:23:73:ef:24:60:90:d8:ec:1b:0f:85:
93:43:c3:e7:96:d7:41:b7:44:51:0c:c9:86:0d:d6:
28:f4:74:db:21:bb:c4:79:a6:a6:a1:fd:32:37:a6:
be:43:52:16:45:ff:a4:3e:69:73:3b:20:f0:08:d0:
55:bb:4f:0d:58:3f:57:74:ab:6a:f4:fe:28:76:e9:
76:2e:f3:63:86:bc:89:3e:aa:0d:f3:2a:17:4d:bd:
db:fc:45:ea:a3:2e:cd:c1:e9:d3:26:3d:a5:db:64:
ff:02:e9:2f:20:af:69:30:0e:bb:a7:8c:99:8b:ad:
ee:78:d1:ca:44:7f:7e:f1:d1:6c:7e:bd:19:36:12:
27:33:3f:fd:73:c9:26:ce:49:cf:a7:53:d1:fb:fd:
13:8a:9e:b3:41:ba:7f:7d:67:0a:a5:97:1d:81:af:
50:f2:0e:bb:08:01:ca:f8:47:b7:e6:77:45:5b:93:
70:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2E:E7:71:9E:34:93:5F:9F:2A:65:4F:3D:6A:7C:4C:49:46:D9:B6
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7e:91:48:22:f9:8c:f7:61:54:49:19:14:42:f9:49:12:88:
06:9b:c3:16:86:17:ce:cd:ff:6e:e3:6b:1c:b8:f6:01:5c:f2:
95:59:de:ee:61:98:58:58:97:39:9a:9c:6b:48:58:49:5e:ad:
28:0a:61:c3:06:2f:74:db:cb:e3:8a:6e:df:79:1d:e2:3d:fe:
0b:4f:24:83:bd:a2:1c:c6:34:ac:51:c4:b8:a5:d7:69:4a:24:
44:92:03:c7:eb:62:74:e0:6b:bf:89:62:b3:01:e4:4a:47:91:
3a:e3:9e:97:5f:b4:62:dd:d1:90:46:ec:96:1b:65:f7:5d:a7:
a4:fe:d8:16:01:a3:01:6a:ff:7b:06:b8:f0:1d:bb:75:0e:6e:
cf:7e:6b:b0:3d:d1:3d:13:f8:1f:b7:ee:4c:81:44:c4:ca:64:
17:f5:76:f1:44:17:88:44:73:92:48:bb:0f:e9:e7:c7:b8:0a:
28:bd:cc:2b:95:69:6a:01:84:c7:ab:38:1a:f3:ae:bf:f9:23:
37:0b:57:67:b6:73:30:44:2c:88:02:5d:69:68:ad:60:57:40:
cf:45:74:3c:37:23:d5:af:81:62:2c:79:03:81:c9:bf:ac:f0:
46:cd:45:ec:71:cc:c0:ad:2f:2e:ba:7d:76:5a:a0:07:7d:c5:
81:da:c6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:47 2025 by rpki-client